PT-2018-18462 · Microsoft · Outlook Web Access+1

Max Smith · Publicado 2018-05-08 · Atualizado 2020-08-24 · CVE-2018-8153

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server (affected versions not specified)

Description A spoofing issue exists when Outlook Web Access (OWA) fails to properly handle web requests. This could allow an attacker to perform script or content injection attacks and trick users into disclosing sensitive information. An attacker could also redirect users to a malicious website that could spoof content or be used to chain an attack with other vulnerabilities in web services.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass by Spoofing

Enumeração de Fraquezas

CWE-290

Identificadores relacionados

CVE-2018-8153

Produtos afetados

Exchange Server

Outlook Web Access

Referências · 5

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8153 · Aviso do Fabricante
• http://securitytracker.com/id/1040850 · Nota
• http://securityfocus.com/bid/104045 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-8153 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-8153 · Aviso do Fabricante